In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ocfs2: avoid moving extents to occupied clusters<\/p>\n
For non-auto OCFS2_IOC_MOVE_EXT operations, userspace supplies a physical
\nme_goal. ocfs2_move_extent() initializes new_phys_cpos from that goal and
\nexpects ocfs2_probe_alloc_group() to replace it with a free run in the
\ntarget block group.<\/p>\n
The probe currently leaves *phys_cpos unchanged if the scan reaches the
\nend of the group without finding a free run. An occupied goal at the last
\nbit can therefore survive the probe and be passed to
\n__ocfs2_move_extent(), which copies file data into a cluster still owned
\nby another inode before the bitmap is updated.<\/p>\n
When the probe does find a free run, it also subtracts move_len from the
\nending bit. The start of an N-bit run ending at i is i – N + 1, so the
\ncurrent calculation can report the bit immediately before the free run.<\/p>\n
Clear *phys_cpos before scanning and use the correct free-run start.
\nCallers already treat a zero result as -ENOSPC, so failed probes no longer
\ncontinue with an occupied caller-controlled goal.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ocfs2: avoid moving extents to occupied clusters<\/p>\n
For non-auto OCFS2_IOC_MOVE_EXT operations, userspace supplies a physical
\nme_goal<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-6812","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/6812","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6812"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6812"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6812"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}